Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci(GitHub): Bump gradle/wrapper-validation-action from 1 to 2 #26

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2024

Bumps gradle/wrapper-validation-action from 1 to 2.

Release notes

Sourced from gradle/wrapper-validation-action's releases.

v2.0.0-rc.1

This is a release candidate for v2.0.0. It is also available under the v2 version label.

What's Changed

The version of the Node.js runtime was updated to 20, and the majority of dependencies were updated to the latest versions. From now on, the wrapper-validation-action will require a Node.js 20 runtime environment.

There are no functional changes in this release.

  • [NEW] Update Node.js runtime to version 20 (#170)

v1.1.0

The action now adds the path of the failed wrapper Jar as a failed-wrapper Step output parameter. This makes the value available for reporting in later Steps/Jobs.

v1.0.6

Gradle Wrapper Validation

v1.0.5

Gradle Wrapper Validation

  • Update dependencies for Node 16 (#53)
  • Update dependencies with security vulnerabilities (#67)
  • Update various other dependencies (#45, #47, #48, #54)

v1.0.4

Gradle Wrapper Validation

v1.0.3

Gradle Wrapper Validation

Update minimist version to 1.2.5

v1.0.2

Gradle Wrapper Validation

v1.0.1

Gradle Wrapper Validation

Commits
  • 27152f6 Update to Node 20 (#170)
  • d8758a9 Build output
  • e916071 Update NPM dependencies
  • d9359e4 Add asdf config file
  • 77d43de Update upload-artifact version
  • 2f8436d Use setup-node@v4 instead of pinning to a revision
  • bfa0fe4 Consistently use npm cache for workflows
  • 8be8473 Update workflows and action to NodeJS 20
  • c8fad9e Bump @​babel/traverse from 7.14.7 to 7.23.2
  • 342dbeb Update README to use actions/checkout@v4
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from amal as a code owner February 1, 2024 04:26
@dependabot dependabot bot added dependencies Dependencies update request gh-action GitHub actions-releated labels Feb 1, 2024
@amal
Copy link
Member

amal commented Feb 2, 2024

/ff

Copy link

github-actions bot commented Feb 2, 2024

Triggered from #26 (comment) by @​amal.

Trying to fast forward main (bcdc082) to dependabot/github_actions/gradle/wrapper-validation-action-2 (9241eee).

Target branch (main):

commit bcdc082a06ef583b71275cb3db929d7fa7d105d1 (HEAD -> main, origin/main, origin/HEAD)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Feb 2 12:26:48 2024 +0000

    ci(GitHub): Bump step-security/harden-runner from 2.6.1 to 2.7.0
    
    Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.6.1 to 2.7.0.
    - [Release notes](https://github.com/step-security/harden-runner/releases)
    - [Commits](https://github.com/step-security/harden-runner/compare/eb238b55efaa70779f274895e782ed17c84f2895...63c24ba6bd7ba022e95695ff85de572c04a18142)
    
    ---
    updated-dependencies:
    - dependency-name: step-security/harden-runner
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>

Pull request (dependabot/github_actions/gradle/wrapper-validation-action-2):

commit 9241eee8257894f19c67b872e7aa34d3c2c60dc0 (pull_request/dependabot/github_actions/gradle/wrapper-validation-action-2)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Feb 1 04:26:39 2024 +0000

    ci(GitHub): Bump gradle/wrapper-validation-action from 1 to 2
    
    Bumps [gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action) from 1 to 2.
    - [Release notes](https://github.com/gradle/wrapper-validation-action/releases)
    - [Commits](https://github.com/gradle/wrapper-validation-action/compare/v1...v2)
    
    ---
    updated-dependencies:
    - dependency-name: gradle/wrapper-validation-action
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>

Can't fast forward main (bcdc082) to dependabot/github_actions/gradle/wrapper-validation-action-2 (9241eee). main (bcdc082) is not a direct ancestor of dependabot/github_actions/gradle/wrapper-validation-action-2 (9241eee). Branches appear to have diverged at e68ea08:

* bcdc082a06ef583b71275cb3db929d7fa7d105d1 ci(GitHub): Bump step-security/harden-runner from 2.6.1 to 2.7.0
* 07af4372051623bf6ad98ba0748f0c8137626ad3 feat: support R8 or ProgGuard available in the classpath (bundled) and support loading in the classpath as a more stable alternative to external run
* 62607bd3c424f7b8506c526593ee8a089da84396 build(deps): bump dependencies:
* fefdc7faaf32575616b6936b9864aab7c75c19a5 chore: add kotlinter, konsist, and `jdk-release` to roadmap
* b1e9ca041403262c9a7ee201288b152e3faa65ea chore: add new detekt todo note
* a6594d778e58a5ca6fb7a198a924f627cff5d967 build(deps): bump kotlinx-metadata-jvm 0.6.0 to 0.6.2 for ProGuard
* 25d1d67c115f895d20e3621e73f5bfe0b4d1e620 ci: test build on all OSes
* ea0e81037ca9866f056bdc12d999c42910f015ce fix: try to tune R8 starting command line for Mac-based CI/CD
* 1923b815439ca3ea2432d2431342cd2ac0e2344c fix(gradle): do not use project name from the task in `TestReportResult`
* a582262eca2379ce695b834de69638f9efef6d29 ci: upload the failed build report as artifact
* 8c8630c7246541db0a0cf93941703404e28ca514 feat: allow to control keep rule modifiers for all auto-kept classes (in auto-generated keep rules)
* 54ff458f420ce85776ec236efc839d4c156234a7 feat: shrink plugin artifact (saved 35.227%, 293.3 KB)
* 81cc2cf8b1ea0c9ead000c0eaf6497b97a3f2aec [WIP] feat: shrink plugin artifact (saved 30.472%, 253.1 KB)
* 34ffc20875918d09d53f691a21ba553f4b0d13a0 feat: improve error reporting for `ExternalToolRunner` and add other minor improvements
* 226a05bc01c46f949119aea4384755467a7840a9 feat: add tests for R8 and ProGuard for: internal, override and some others
* 9a7cf3ad7a9486878e5d6e6f2b6b09baf0dd6f0a feat: add tests for R8 and ProGuard annotations and 'ifs' matching
* af0481e51f65a89b40eabc53f54811331d12f809 feat: add tests for R8 and ProGuard `<clinit>` matching
* 7500e0ffb036c8a6cc3f6f1e0afa2f695c856e3f feat: add tests for R8 and ProGuard 'bridge' flag matching
* d1baa82f099771524cd82fd1b6aae225dac4f393 feat: add tests for R8 and ProGuard class specification flags/modifiers matching
* 7f59b7397d951e556018ccc476b4bd6135b2368a feat: add more tests for R8 and ProGuard keep rules based on the `-printseeds` output
* 7181a8290dc207cdc151531425b022dc9784c5be feat: add more tests for R8 and ProGuard keep rules based on the `-printseeds` output
* 0ee74cad8bb6d84a610cefdbd40dbb6213f9ad68 feat: create the infrastructure for automated shrinkers testing to ensure behavior stability and highlight any discrepancies between R8 and ProGuard
* 4357abd7ebb5192b2252758aeb9d52181904a500 refactor: make lifecycle log output to have consistent indentation with other levels, just another visual update
* cfcc1ce130e6f82b6b109a9d1f4e6412208909f0 feat: improve control and reporting of the configuration plugin overall
* ff810430aa0e5f62cd0556f23930e59230829d99 feat: allow switching on/off the R8 full mode, also called "non-compat mode." Disabled by default
* 838b3024c8bd56e88d0be4e323091f5637933062 [WIP] feat: shrink plugin artifact (saved 61.120%, 508.2 KB)
* 4bce3bf6fefc3966b4e376b821e095388918d3b6 [WIP] feat: shrink plugin artifact (saved 61.120%, 508.2 KB)
* 8cac1ccf72ed4e7dbdc80282c0da07760e7372eb build: start `0.7.0-SNAPSHOT` development
| * 9241eee8257894f19c67b872e7aa34d3c2c60dc0 ci(GitHub): Bump gradle/wrapper-validation-action from 1 to 2
|/  
* e68ea08e06c6e79f706fdcae6692c4438343d65a release: v0.6.0

commit e68ea08e06c6e79f706fdcae6692c4438343d65a (tag: v0.6.0)
Author: Artyom Shendrik <[email protected]>
Date:   Fri Jan 5 21:46:40 2024 +0100

    release: v0.6.0
    
    Signed-off-by: Artyom Shendrik <[email protected]>

Rebase locally, and then force push to dependabot/github_actions/gradle/wrapper-validation-action-2.

@amal
Copy link
Member

amal commented Feb 2, 2024

@dependabot rebase

Bumps [gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action) from 1 to 2.
- [Release notes](https://github.com/gradle/wrapper-validation-action/releases)
- [Commits](gradle/wrapper-validation-action@v1...v2)

---
updated-dependencies:
- dependency-name: gradle/wrapper-validation-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/gradle/wrapper-validation-action-2 branch from 9241eee to 2d1b76f Compare February 2, 2024 12:35
@amal
Copy link
Member

amal commented Feb 2, 2024

/ff

Copy link

github-actions bot commented Feb 2, 2024

Triggered from #26 (comment) by @​amal.

Trying to fast forward main (bcdc082) to dependabot/github_actions/gradle/wrapper-validation-action-2 (2d1b76f).

Target branch (main):

commit bcdc082a06ef583b71275cb3db929d7fa7d105d1 (HEAD -> main, origin/main, origin/HEAD)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Feb 2 12:26:48 2024 +0000

    ci(GitHub): Bump step-security/harden-runner from 2.6.1 to 2.7.0
    
    Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.6.1 to 2.7.0.
    - [Release notes](https://github.com/step-security/harden-runner/releases)
    - [Commits](https://github.com/step-security/harden-runner/compare/eb238b55efaa70779f274895e782ed17c84f2895...63c24ba6bd7ba022e95695ff85de572c04a18142)
    
    ---
    updated-dependencies:
    - dependency-name: step-security/harden-runner
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>

Pull request (dependabot/github_actions/gradle/wrapper-validation-action-2):

commit 2d1b76ff7d807ff0e88e425dc64fcf29f6d8d2c6 (pull_request/dependabot/github_actions/gradle/wrapper-validation-action-2)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Feb 2 12:34:59 2024 +0000

    ci(GitHub): Bump gradle/wrapper-validation-action from 1 to 2
    
    Bumps [gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action) from 1 to 2.
    - [Release notes](https://github.com/gradle/wrapper-validation-action/releases)
    - [Commits](https://github.com/gradle/wrapper-validation-action/compare/v1...v2)
    
    ---
    updated-dependencies:
    - dependency-name: gradle/wrapper-validation-action
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>

Fast forwarding main (bcdc082) to dependabot/github_actions/gradle/wrapper-validation-action-2 (2d1b76f).

$ git push origin 2d1b76ff7d807ff0e88e425dc64fcf29f6d8d2c6:main
To https://github.com/fluxo-kt/fluxo-kmp-conf.git
   bcdc082..2d1b76f  2d1b76ff7d807ff0e88e425dc64fcf29f6d8d2c6 -> main

@github-actions github-actions bot merged commit 2d1b76f into main Feb 2, 2024
7 checks passed
@github-actions github-actions bot deleted the dependabot/github_actions/gradle/wrapper-validation-action-2 branch February 2, 2024 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Dependencies update request gh-action GitHub actions-releated
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant